The Human Factor, Security Culture and the Cyber Skills Gap

Even before AI became ubiquitous, human error was consistently the most common root cause in data breaches. Now, with AI agents, generative tools, and automation embedded in everyday workflows, human risk converges with AI risk, creating a hybrid vulnerability that can be exploited at multiple layers. AI powered social engineering exploits cognitive bias, trust and routine behaviours more effectively than ever. Deepfake enabled impersonation, false invoice fraud and AI generated phishing have become highly scalable and convincing.

Misuse of AI tools by employees, accidental data sharing and overreliance on AI generated outputs all contribute to breach risk. At the same time, organisations continue to face a significant shortage of skilled security professionals, placing additional pressure on SOC teams and increasing the risk of configuration errors or delayed detection.